Skill UI

A comprehensive skill for conducting offensive security assessments across major cloud providers, including Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). It guides users through reconnaissance, authentication testing, resource enumeration, privilege escalation, and persistence techniques, strictly for authorized security engagements.

A comprehensive guide for managing Documenso integration incidents. It provides step-by-step procedures for diagnosing and resolving production outages, covering cloud service disruptions, self-hosted database errors, and webhook failures. Essential for on-call engineers to maintain system uptime.

A comprehensive runbook for rapidly responding to Fireflies.ai integration failures. Provides structured triage steps, P1-P4 severity assessment, and detailed remediation guides for common issues like API key expirations, rate limiting, and webhook discrepancies. Essential for on-call engineers during platform outages.

A comprehensive, step-by-step checklist for deploying Fireflies.ai integrations to a live production environment. This guide ensures API key management, webhook setup, robust health checks (including a TypeScript example), continuous monitoring, and a defined rollback procedure are all executed correctly for a successful go-live.

A comprehensive runbook providing step-by-step procedures for managing production incidents related to Linear integrations. It guides users through diagnosing outages, checking API authentication, managing rate limits, and resolving webhook failures, ensuring a quick and effective response across various severities.

Submit and manage autonomous lab protocols on Ginkgo Cloud Lab, leveraging RACs for cell-free protein expression validation/optimization, fluorescent pixel art, EstiMate AI assessments, and guided ordering of sample inputs through the web interface.

This comprehensive guide details the use of FFUF, a fast web fuzzer written in Go. It is designed for advanced security penetration testing, providing techniques for content discovery, subdomain enumeration, parameter fuzzing, and POST data testing. Learn to master the FUZZ keyword, advanced filtering, and auto-calibration to efficiently identify hidden paths and potential vulnerabilities in web applications.

This guide details the comprehensive deployment of Cisco Duo Multi-Factor Authentication across critical access points like VPN, RDP, SSH, and web applications. It covers setting up the Duo Authentication Proxy, implementing adaptive access policies based on risk and device health, and deploying phishing-resistant methods like WebAuthn/FIDO2, ensuring compliance with NIST standards. Use this when hardening identity access management or establishing robust security controls.

A comprehensive guide to implementing and validating Transport Layer Security (TLS) 1.3. This skill covers configuring modern cipher suites, key exchange groups, and enforcing perfect forward secrecy (PFS). Use this when deploying secure communication protocols, hardening network services, meeting compliance standards, or performing deep security assessments on web servers and applications.

A comprehensive guide on deploying Cloudflare Access and Tunnel to establish a Zero Trust Network Access (ZTNA) solution. This method replaces traditional VPNs by securely exposing self-hosted internal applications (web, SSH, RDP) without opening inbound ports. It integrates identity-aware policies, device posture checks, and robust identity providers (Okta, Azure AD) for highly secure, least-privilege access.

This guide provides a structured methodology for hypothesis-driven threat hunting focused on detecting web shell deployment (T1505.003) on internet-facing servers. It analyzes file creation in web directories, suspicious child-process generation from web server processes, and anomalous HTTP request patterns. Use this during incident response, proactive security assessments, or when EDR/SIEM alerts indicate web server process anomalies.

This skill covers the deployment and fine-tuning of Web Application Firewall (WAF) rules across major cloud platforms like AWS, Azure, and Cloudflare. It addresses critical security needs such as mitigating OWASP vulnerabilities (SQLi, XSS), managing bot traffic, implementing rate limiting, and ensuring compliance (e.g., PCI-DSS). The workflow guides users through deploying managed rule sets, creating custom rate-based logic, and minimizing false positives.